CVE-2014-4750: IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a ma...

Security readout for executives and security teams

IBM PowerVC Express Edition 1.2.0 before FixPack3 used FTP when transferring files to a managed IVM. FTP can expose credentials to anyone able to observe that network traffic. The business risk is credential theft leading to broader access in PowerVC-managed infrastructure. Likely limited to environments running IBM PowerVC Express Edition 1.2.0 before FixPack3 with managed IVM connections. Exposure depends heavily on whether attackers can observe management network traffic. The provided sources do not confirm impact on other editions or versions. Treat as a targeted infrastructure hygiene issue, not an internet-wide emergency based on the supplied evidence. Prioritize remediation if PowerVC manages sensitive hosts or management networks are shared, weakly segmented, or reachable by many administrators. Mitigation focus: Upgrade IBM PowerVC Express Edition 1.2.0 to FixPack3 or later per IBM guidance.; Check IBM support guidance for any additional required configuration changes.; Restrict access to PowerVC and IVM management networks..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.